Feature Overview

Okta SSO integration is a Platform-level identity configuration in CoreStack that lets your users authenticate into the CoreStack portal using their existing Okta credentials instead of a separate CoreStack password. It is relevant when your organization standardizes application access through Okta and wants CoreStack included in that single sign-on scope.

This setup is most valuable to Platform Admins and IT/Identity administrators who manage both the Okta tenant and the CoreStack environment configuration. It does not cover SSO configuration for other identity providers, such as Azure AD or OneLogin — those follow separate connection setup processes.

How It Works

You create a SAML 2.0 application in Okta using two CoreStack-provided values — the Single Sign-On URL and the Audience URI — both derived from your environment's Auth0 tenant name and your company name. Once the application is configured and attributes are mapped, Okta generates a SAML certificate and a Sign-On URL. You send these, along with your organization's email domain, to CoreStack support, who use them to activate the connection. The integration is not self-service end-to-end — activation requires CoreStack support to complete the final step, so plan for a short turnaround between submitting your details and SSO going live.

Prerequisites

Before you begin, ensure the following:

• Role: You have the Platform Account Admin role (or equivalent Okta Super Administrator access) to create and configure applications in Okta.
• Environment details: You know which CoreStack environment your organization uses (for example, Prod US or Prod IND) and its corresponding Auth0 tenant name (see the table below).
• Company identifier: You know your company's CoreStack customer name, suffixed with -prod (for example, abc-prod), to use as the value.
• Access: You can access Applications > Applications in the Okta Admin Console.

You'll need the following two configuration values for your CoreStack environment.

Single Sign-On URL:

https://<auth0_tenant_name>-auth.corestack.io/login/callback?connection=<customername>-okta-saml

Audience URI (SP Entity ID):

urn:auth0:<auth0_tenant_name>:<customername>-okta-saml

Auth0 Tenant Names by Environment

Replace <auth0_tenant_name> above with the value for your environment:

Replace <customername> with your company name, appended with "-prod" (e.g. abc-prod).

Step 1: Create the Application in Okta

1. In Okta, navigate to Applications → Applications
2. Click Create App Integration
3. Select SAML 2.0
4. Click Next
5. Enter the App Name as: <customername>

Step 2: Configure SAML Settings

Enter the values from the Prerequisites section above:

Single Sign-On URL:

https://<auth0_tenant_name>-auth.corestack.io/login/callback?connection=<customername>-okta-saml

Audience URI (SP Entity ID):

urn:auth0:<auth0_tenant_name>:<customername>-okta-saml

Step 3: Configure Attributes

Add the following Attribute Statements:

Step 4: Review and Finish

1. Click Next
2. Select the appropriate option (Internal app)
3. Click Finish
4. Save the configuration
5. Assign the users who need to sign in to the CoreStack portal through this application

Step 5: Share Your SAML Details

Once the application is set up, Okta will generate two values you need to send to CoreStack support to activate the connection:

1. SAML Certificate
2. Sign-On URL

Along with these, also share the email domain for which Okta SSO is being configured (e.g. @yourcompany.com).

Step 6: Connection Activation

CoreStack will use these details to activate the connection and confirm once SSO is live and ready to use.